Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62AfxKW12ynBuMqp3A9uEBxKRko.roa
File: 62AfxKW12ynBuMqp3A9uEBxKRko.roa (raw, json)
Hash identifier: qY+d3951RR1xaxpMQlhHRWqjxgSh6M7Pd+tuNpRNmp4=
Subject key identifier: EB:60:1F:C4:A5:B5:DB:29:C1:B8:CA:A9:DC:0F:6E:10:1C:4A:46:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183146F05BBBAAFBC7424E9C80BCBCBC153
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62AfxKW12ynBuMqp3A9uEBxKRko.roa
Signing time: Tue 06 Sep 2022 20:12:43 +0000
ROA not before: Tue 06 Sep 2022 20:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:6f:05:bb:ba:af:bc:74:24:e9:c8:0b:cb:cb:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 6 20:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb601fc4a5b5db29c1b8caa9dc0f6e101c4a464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:4f:db:54:3b:eb:5c:67:9f:87:89:f1:5d:
6c:44:7c:96:ec:67:ee:ba:23:7c:78:85:88:52:cf:
46:df:1c:cf:15:56:f3:89:d2:c2:fb:fa:49:f1:04:
cb:8f:0a:d2:c4:70:b7:6c:96:64:3e:d5:7e:b4:d7:
a8:8f:ba:aa:71:9a:21:14:67:0d:93:31:d5:5d:aa:
08:f7:d6:8a:ac:75:7c:2c:7c:bc:75:32:1a:2c:99:
37:6d:85:2d:2f:dd:97:fa:e2:23:7a:9a:f2:96:35:
29:9d:ef:17:a5:81:8f:9d:14:76:26:1d:09:1f:78:
e9:88:84:5e:fe:e0:20:0e:a2:37:6d:04:a8:d6:a1:
76:d1:d3:ff:c6:32:d8:b9:4f:9a:e3:38:6c:fe:6a:
43:0e:a5:50:5d:ea:f4:70:43:1a:1e:a7:5a:5c:2d:
03:f6:8b:4c:7e:2c:a8:5f:16:65:d7:ef:41:b9:50:
8b:57:b7:c1:a1:c3:c1:2e:a8:5e:5d:a7:33:c8:50:
17:25:9a:fb:98:7d:00:cd:94:f2:c0:2a:38:0c:f6:
71:dd:44:76:ac:83:8b:a7:f7:c1:6f:e6:bb:0e:59:
0e:38:02:26:67:1f:0c:df:19:2d:55:4e:ca:aa:f5:
6e:84:79:fd:91:75:d3:6f:c0:4b:b3:3d:22:fa:03:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:60:1F:C4:A5:B5:DB:29:C1:B8:CA:A9:DC:0F:6E:10:1C:4A:46:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62AfxKW12ynBuMqp3A9uEBxKRko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:8d:e0:fd:2f:9c:3a:3b:6d:e8:30:d0:33:08:45:d6:02:de:
d2:b0:14:fa:66:29:4f:06:ed:7f:f9:e5:ff:9f:88:aa:7d:dc:
77:6d:9f:00:81:65:b3:d5:31:a8:7a:1c:ac:3e:d6:ad:b2:4b:
66:36:c2:82:3d:d9:f6:7d:3d:7b:a0:44:a4:9b:b6:98:47:8b:
c6:9d:1b:ec:2c:c6:12:b1:48:f2:bd:12:75:41:2c:2d:08:70:
84:b5:37:a4:bf:69:9a:6d:cb:13:8a:54:8e:83:66:d3:e1:35:
a6:c7:cd:0a:51:e2:fc:96:a2:cb:29:6e:d4:5d:b1:98:7b:0d:
46:13:21:ae:49:97:95:dc:20:50:7f:32:c4:89:0e:be:fb:16:
80:cf:71:8f:73:7d:69:f2:66:9a:dc:5b:61:25:5f:49:95:0b:
d8:83:ca:4d:f7:68:4c:fc:0a:59:de:ee:5c:8a:8b:67:83:99:
71:fd:1f:96:f8:c0:c6:93:cf:a1:a5:28:2e:ab:63:ef:bc:b8:
d0:41:a0:37:84:6e:db:b2:24:b1:67:42:05:8b:29:8c:85:d9:
ea:2f:a1:09:2c:ae:02:7b:f5:80:63:60:7f:13:66:e7:58:81:
68:f8:e6:2a:f3:9c:a8:c9:f1:42:00:a2:a5:f0:c0:f3:d2:d7:
70:56:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:20:37 2025 by rpki-client